A Company Is Storing Data on Amazon Simple Storage Service

question 636

Multiple Choice

A company is storing data on Amazon Simple Storage Service (S3) . The company's security policy mandates that data is encrypted at rest. Which of the following methods can achieve this? (Choose three.)

• A) Use Amazon S3 server-side encryption with AWS Key Management Service managed keys.
• B) Use Amazon S3 server-side encryption with customer-provided keys.
• C) Use Amazon S3 server-side encryption with EC2 key pair.
• D) Use Amazon S3 bucket policies to restrict access to the data at rest.
• E) Encrypt the data on the client-side before ingesting to Amazon S3 using their own master key.
• F) Use SSL to encrypt the data while in transit to Amazon S3.

---

Definitions:

Open Source

Software with source code that anyone can inspect, modify, and enhance.

Uninstall Program

The process of removing an application or software from a computer system.

Restore Point

A type of backup that doesn’t affect your personal data files but saves all the apps, updates, drivers, and information needed to restore your computer system to the exact way it’s configured at that time. That way, if something does go awry, you can return your system to the way it was before you started.

Instruction Set

A collection of commands understood by a computer's CPU, defining how software instructs the processor to perform operations.